
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json)
Hash identifier: Oe8KU/awR+pm/bKmQOiklLzPKaCs+H5GWEVOOfrZgBI=
Subject key identifier: B4:47:41:F5:17:01:DC:64:CE:C7:00:01:2D:A4:AC:EB:55:F1:58:36
Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Certificate serial: 0481
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
Manifest number: 0467
Signing time: Wed 13 May 2026 00:15:09 +0000
Manifest this update: Wed 13 May 2026 00:15:09 +0000
Manifest next update: Wed 20 May 2026 00:15:09 +0000
Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: 7mEt/3bFTcjWfednf+3Mtr9X5Xs3TaUiC4EN3eQBgRI=)
2: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: 9Fd943GuQnIJTghRawSBwpY1MlmUVR4OO3uXynSyRN8=)
3: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: YLvOpo/gAJOyi4aEbUEuHHlI1c0Z1SZvTOBlRFCy2+E=)
4: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153 (0x481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Validity
Not Before: May 13 00:15:09 2026 GMT
Not After : May 20 00:15:09 2026 GMT
Subject: CN=6a03c28d-4296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:cb:be:89:b8:4b:3e:b5:cd:4b:d3:5e:4e:
e8:aa:65:77:57:10:5e:d0:2b:c7:40:1a:99:04:1b:
eb:8b:4a:07:6e:59:0b:e8:9c:fb:0c:fd:0c:0b:b7:
b1:db:19:e4:31:55:49:97:e6:bd:72:4c:3b:9b:a7:
0b:2e:1f:3e:ce:86:1c:c0:07:d6:55:e0:d1:cd:ba:
3c:7a:9e:e7:93:9b:0d:3d:5b:31:c0:68:f2:7e:51:
1e:ef:d3:ed:6c:20:f3:34:c5:15:d6:6a:9f:b8:f7:
42:bb:c7:6f:2d:43:64:30:ec:d7:70:dd:ae:b2:f5:
4e:d0:1e:4b:00:a5:c4:15:32:b6:f6:70:9c:28:c3:
bc:b8:0b:cf:df:ca:1f:78:18:85:6d:32:f9:ed:d3:
30:f5:42:62:f9:07:8b:48:ac:43:af:ca:12:b3:cc:
fa:66:0d:f0:8e:42:64:00:01:2b:cf:07:07:43:7b:
70:20:c7:75:c8:3a:95:0a:e5:47:95:ab:9a:56:df:
dd:79:e3:69:4d:9c:38:f4:f7:cc:1b:fd:e6:5a:e6:
06:1c:3a:dd:60:ed:30:e7:36:4a:ef:e3:68:19:34:
3b:2a:18:a2:16:22:36:d9:2c:37:6e:a8:36:04:f6:
93:e0:b0:1a:63:0f:e9:6f:45:46:d6:d3:40:e5:02:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:47:41:F5:17:01:DC:64:CE:C7:00:01:2D:A4:AC:EB:55:F1:58:36
X509v3 Authority Key Identifier:
keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:15:83:3d:e8:a7:78:07:cb:24:cc:6b:3d:a3:f1:7f:56:09:
1d:e0:99:28:4b:f0:8e:f4:8a:8c:e1:7c:70:ab:15:e0:dc:67:
a9:ec:fd:03:27:9d:be:97:ad:75:44:a8:cc:2d:f2:8b:ef:c7:
9b:70:7d:81:38:b1:2a:99:dc:0a:ea:d6:18:a9:b8:01:c3:25:
52:e7:ba:dc:b6:b1:08:48:78:85:1a:87:44:2b:c6:de:38:2c:
82:34:28:eb:a0:6d:ea:3a:25:2d:a9:f3:21:8f:61:e8:2a:10:
b9:6a:c3:eb:9a:0d:8e:b5:98:66:9b:fc:3f:0d:79:df:ef:d1:
91:d2:52:51:4a:48:55:26:24:41:f2:2c:d4:f3:0d:83:09:91:
e6:5f:07:48:f2:ee:69:4a:fc:8e:b9:1b:ae:1c:2f:10:cc:56:
e2:9e:a4:21:3a:e0:31:74:9e:8d:3b:0f:1d:f2:9f:98:68:db:
85:d7:47:85:66:13:14:a5:c1:91:cd:4f:81:eb:80:51:0c:b2:
e6:20:d8:9e:9f:cc:0a:19:aa:fa:49:5d:9f:2e:26:b2:8a:17:
a4:a1:4a:51:13:3e:ef:1d:92:46:20:56:90:a4:dd:64:5a:68:
33:6d:96:5b:4b:27:a8:20:96:44:88:80:45:89:0d:45:85:a2:
44:7c:b2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:32 2026 by rpki-client